Route Origin Authorization

$ rpki-client -vvf rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/A023DD56B12F11EEB1221E32C4F9AE02.roa
File:                     A023DD56B12F11EEB1221E32C4F9AE02.roa (raw, json)
Hash identifier:          70legGmeGWDJLjLTpZoQ9AL6l+i0i0dYyab0cFhZx6Q=
Subject key identifier:   35:C6:39:8C:FC:1A:88:1F:20:5D:E3:1B:7D:54:B9:A9:4B:30:0E:2F
Certificate issuer:       /CN=A9161322/serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
Certificate serial:       0192
Authority key identifier: 98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B
Authority info access:    rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/A023DD56B12F11EEB1221E32C4F9AE02.roa
Signing time:             Sun 01 Mar 2026 05:24:54 +0000
ROA not before:           Sun 01 Mar 2026 05:24:54 +0000
ROA not after:            Sat 01 May 2027 00:00:00 +0000
asID:                     152328
IP address blocks:        157.10.172.0/23 maxlen: 23
                          157.10.172.0/24 maxlen: 24
                          157.10.173.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl
                          rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 08 Mar 2026 23:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 402 (0x192)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9161322, serialNumber=9873889783F7530EB44BE0097AA3618B07168F3B
        Validity
            Not Before: Mar  1 05:24:54 2026 GMT
            Not After : May  1 00:00:00 2027 GMT
        Subject: CN=69a3cda6-253b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8e:e6:8d:de:1b:c1:cc:3b:c5:58:ce:28:6d:
                    ec:f8:5b:fb:14:4f:5e:7f:91:c7:44:8a:d4:87:32:
                    a0:e0:6d:73:44:fa:2c:5b:61:78:5b:a3:71:4a:d6:
                    2b:4e:4a:8b:43:ea:20:37:cf:08:d6:6b:33:bd:bf:
                    dc:51:4b:0c:14:a2:ac:5f:34:bb:0d:6f:08:2b:9c:
                    34:fb:e3:e8:d9:95:22:aa:ae:80:52:4f:1a:c3:40:
                    f0:37:8c:f4:60:70:9e:ba:d0:93:cd:96:be:15:06:
                    c0:c8:0a:7c:eb:6f:9f:0c:78:d8:f3:18:81:7e:88:
                    31:42:5f:5c:5d:ed:f3:62:b6:04:83:91:f0:92:0c:
                    83:a0:d5:39:ae:83:27:a7:90:a5:19:91:78:07:8e:
                    8c:59:60:d5:17:1c:cf:22:1b:7f:41:9b:b2:64:2e:
                    70:ee:4d:0f:46:63:8a:a2:ee:62:df:ae:25:1b:a9:
                    43:a8:94:14:de:07:ff:1c:28:a0:b1:af:d5:0d:e2:
                    8a:d8:b8:3f:cd:f9:06:ef:0c:72:cc:00:2a:22:a3:
                    4c:f1:e5:52:b3:95:72:a7:ab:a1:76:4b:1a:de:11:
                    53:e0:3d:e8:26:fb:d2:84:f6:c8:df:3e:f6:82:64:
                    ac:f8:ca:9c:3d:28:0f:6a:f0:09:01:91:db:56:8e:
                    e8:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:C6:39:8C:FC:1A:88:1F:20:5D:E3:1B:7D:54:B9:A9:4B:30:0E:2F
            X509v3 Authority Key Identifier:
                keyid:98:73:88:97:83:F7:53:0E:B4:4B:E0:09:7A:A3:61:8B:07:16:8F:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/mHOIl4P3Uw60S-AJeqNhiwcWjzs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/mHOIl4P3Uw60S-AJeqNhiwcWjzs.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9161322/49E4B008B0EB11EEB6989F54C4F9AE02/A023DD56B12F11EEB1221E32C4F9AE02.roa

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.10.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         80:88:aa:27:7f:ac:7a:38:2e:0f:cf:be:7d:e5:75:82:6f:b0:
         b0:60:24:4e:c6:b8:fe:1d:2c:35:de:a9:b2:fd:2d:65:d1:fc:
         87:f9:ac:4f:92:6d:c0:d7:6f:35:93:3d:db:ea:83:7d:42:62:
         9a:9d:9a:e8:b9:5e:26:32:0a:28:d5:87:8f:0d:26:f7:b8:d8:
         18:ac:03:85:f5:5a:dc:b4:b7:47:14:19:dd:b5:b2:7e:a9:5c:
         c8:1d:d7:34:bd:e6:76:73:59:e4:56:84:d5:26:cc:90:ff:4f:
         be:0b:54:7f:af:2d:40:b5:12:be:f6:0c:3a:16:b3:a1:8c:21:
         ca:61:6d:9d:f7:0c:c9:c0:b8:e0:20:ef:ff:e1:12:c2:b2:e7:
         52:ac:0d:ef:47:04:31:6c:53:02:9c:4c:43:25:60:b4:e4:d8:
         90:99:d9:91:50:aa:44:cb:22:13:72:2d:4f:be:0f:0c:8e:eb:
         a8:de:c2:f0:92:41:19:74:fc:dc:9d:2d:36:6a:b7:e6:e2:12:
         b3:6a:df:41:d1:79:11:7f:1e:ff:f9:28:b0:38:8a:1a:11:e8:
         df:6d:01:49:05:76:ee:7b:a3:d0:d8:19:d0:b7:92:46:6d:de:
         15:d3:ec:02:82:2a:0c:fe:f5:b6:8e:b6:2e:37:ca:14:ae:61:
         27:27:80:dc
-----BEGIN CERTIFICATE-----
MIIFPDCCBCSgAwIBAgICAZIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx
NjEzMjIxMTAvBgNVBAUTKDk4NzM4ODk3ODNGNzUzMEVCNDRCRTAwOTdBQTM2MThC
MDcxNjhGM0IwHhcNMjYwMzAxMDUyNDU0WhcNMjcwNTAxMDAwMDAwWjAYMRYwFAYD
VQQDEw02OWEzY2RhNi0yNTNiMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC
AQEAyI7mjd4bwcw7xVjOKG3s+Fv7FE9ef5HHRIrUhzKg4G1zRPosW2F4W6NxStYr
TkqLQ+ogN88I1mszvb/cUUsMFKKsXzS7DW8IK5w0++Po2ZUiqq6AUk8aw0DwN4z0
YHCeutCTzZa+FQbAyAp862+fDHjY8xiBfogxQl9cXe3zYrYEg5HwkgyDoNU5roMn
p5ClGZF4B46MWWDVFxzPIht/QZuyZC5w7k0PRmOKou5i364lG6lDqJQU3gf/HCig
sa/VDeKK2Lg/zfkG7wxyzAAqIqNM8eVSs5Vyp6uhdksa3hFT4D3oJvvShPbI3z72
gmSs+MqcPSgPavAJAZHbVo7ogQIDAQABo4ICYDCCAlwwHQYDVR0OBBYEFDXGOYz8
GogfIF3jG31UualLMA4vMB8GA1UdIwQYMBaAFJhziJeD91MOtEvgCXqjYYsHFo87
MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE2MTMyMi80OUU0QjAwOEIw
RUIxMUVFQjY5ODlGNTRDNEY5QUUwMi9tSE9JbDRQM1V3NjBTLUFKZXFOaGl3Y1dq
enMuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp
LmFwbmljLm5ldC9yZXBvc2l0b3J5L0IzQTI0RjIwMUQ2NjExRTI4QUM4ODM3Qzcy
RkQxRkYyL21IT0lsNFAzVXc2MFMtQUplcU5oaXdjV2p6cy5jZXIwSgYDVR0gAQH/
BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p
Yy5uZXQvUlBLSS9DUFMucGRmMIGWBggrBgEFBQcBCwSBiTCBhjCBgwYIKwYBBQUH
MAuGd3JzeW5jOi8vcnBraS5hcG5pYy5uZXQvbWVtYmVyX3JlcG9zaXRvcnkvQTkx
NjEzMjIvNDlFNEIwMDhCMEVCMTFFRUI2OTg5RjU0QzRGOUFFMDIvQTAyM0RENTZC
MTJGMTFFRUIxMjIxRTMyQzRGOUFFMDIucm9hMB8GCCsGAQUFBwEHAQH/BBAwDjAM
BAIAATAGAwQBnQqsMA0GCSqGSIb3DQEBCwUAA4IBAQCAiKonf6x6OC4Pz7595XWC
b7CwYCROxrj+HSw13qmy/S1l0fyH+axPkm3A1281kz3b6oN9QmKanZrouV4mMgoo
1YePDSb3uNgYrAOF9VrctLdHFBndtbJ+qVzIHdc0veZ2c1nkVoTVJsyQ/0++C1R/
ry1AtRK+9gw6FrOhjCHKYW2d9wzJwLjgIO//4RLCsudSrA3vRwQxbFMCnExDJWC0
5NiQmdmRUKpEyyITci1Pvg8Mjuuo3sLwkkEZdPzcnS02arfm4hKzat9B0XkRfx7/
+SiwOIoaEejfbQFJBXbue6PQ2BnQt5JGbd4V0+wCgioM/vW2jrYuN8oUrmEnJ4Dc
-----END CERTIFICATE-----
Generated at Mon Mar 2 22:20:55 2026 by rpki-client